conjur

Documentation

Overview

Package conjur provides a Conjur provider for External Secrets.

Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. You may obtain a copy of the License at

http://www.apache.org/licenses/LICENSE-2.0

Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License.

Index

• type Client
• type Provider
  • func (p *Provider) Capabilities() esv1beta1.SecretStoreCapabilities
  • func (p *Provider) Close(_ context.Context) error
  • func (p *Provider) DeleteSecret(_ context.Context, _ esv1beta1.PushRemoteRef) error
  • func (p *Provider) GetAllSecrets(_ context.Context, _ esv1beta1.ExternalSecretFind) (map[string][]byte, error)
  • func (p *Provider) GetSecret(_ context.Context, ref esv1beta1.ExternalSecretDataRemoteRef) ([]byte, error)
  • func (p *Provider) GetSecretMap(ctx context.Context, ref esv1beta1.ExternalSecretDataRemoteRef) (map[string][]byte, error)
  • func (p *Provider) NewClient(ctx context.Context, store esv1beta1.GenericStore, kube client.Client, ...) (esv1beta1.SecretsClient, error)
  • func (p *Provider) PushSecret(_ context.Context, _ []byte, _ *apiextensionsv1.JSON, ...) error
  • func (p *Provider) Validate() (esv1beta1.ValidationResult, error)
  • func (p *Provider) ValidateStore(store esv1beta1.GenericStore) error

Types

type Client

type Client interface {
	RetrieveSecret(secret string) (result []byte, err error)
}

Client is an interface for the Conjur client.

type Provider

type Provider struct {
	ConjurClient Client
	StoreKind    string
	// contains filtered or unexported fields
}

Provider is a provider for Conjur.

func (*Provider) Capabilities

func (p *Provider) Capabilities() esv1beta1.SecretStoreCapabilities

Capabilities returns the provider Capabilities (Read, Write, ReadWrite).

func (*Provider) Close

func (p *Provider) Close(_ context.Context) error

Close closes the provider.

func (*Provider) DeleteSecret

func (p *Provider) DeleteSecret(_ context.Context, _ esv1beta1.PushRemoteRef) error

func (*Provider) GetAllSecrets

func (p *Provider) GetAllSecrets(_ context.Context, _ esv1beta1.ExternalSecretFind) (map[string][]byte, error)

GetAllSecrets returns all secrets from the provider. NOT IMPLEMENTED.

func (*Provider) GetSecret

func (p *Provider) GetSecret(_ context.Context, ref esv1beta1.ExternalSecretDataRemoteRef) ([]byte, error)

GetSecret returns a single secret from the provider.

func (*Provider) GetSecretMap

func (p *Provider) GetSecretMap(ctx context.Context, ref esv1beta1.ExternalSecretDataRemoteRef) (map[string][]byte, error)

GetSecretMap returns multiple k/v pairs from the provider.

func (*Provider) NewClient

func (p *Provider) NewClient(ctx context.Context, store esv1beta1.GenericStore, kube client.Client, namespace string) (esv1beta1.SecretsClient, error)

NewClient creates a new Conjur client.

func (*Provider) PushSecret

func (p *Provider) PushSecret(_ context.Context, _ []byte, _ *apiextensionsv1.JSON, _ esv1beta1.PushRemoteRef) error

PushSecret will write a single secret into the provider.

func (*Provider) Validate

func (p *Provider) Validate() (esv1beta1.ValidationResult, error)

Validate validates the provider.

func (*Provider) ValidateStore

func (p *Provider) ValidateStore(store esv1beta1.GenericStore) error

ValidateStore validates the store.